Remote Lead Application Security Engineer

About the Role

Our client, a rapidly growing tech firm, is seeking a visionary and experienced Lead Application Security Engineer to spearhead our security initiatives within a fully remote framework. This pivotal role will involve leading the charge in securing our software development lifecycle (SDLC) and ensuring our applications are robust, resilient, and protected against sophisticated threats. As a remote-first organization, we are dedicated to fostering a collaborative and high-performing culture that transcends physical boundaries. You will be instrumental in defining our application security strategy, mentoring a talented team, and driving the adoption of best practices across all engineering disciplines. If you are passionate about building secure software and leading impactful teams from anywhere, this is the opportunity for you.

Key Responsibilities

Lead the design, implementation, and maintenance of application security programs and strategies. Oversee and conduct secure code reviews, threat modeling, and security testing throughout the SDLC. Develop and enforce secure coding standards and guidelines for various programming languages and frameworks. Integrate security tools and processes into CI/CD pipelines to enable DevSecOps practices. Manage and mentor a team of application security engineers, fostering their professional growth. Collaborate closely with development teams to identify and remediate application vulnerabilities. Architect and implement security controls for APIs, microservices, and web applications. Stay ahead of emerging application security threats, vulnerabilities, and mitigation techniques. Develop and deliver application security training to engineering teams.

Lead incident response efforts for application-specific security breaches.

Requirements

Bachelor's degree in Computer Science, Software Engineering, Information Security, or a closely related field. Minimum of 8 years of progressive experience in application security engineering, with at least 3 years in a lead or management role. Extensive experience with secure SDLC methodologies, OWASP Top 10, and common application vulnerabilities. Deep understanding of web application security, API security, and mobile application security. Proficiency in multiple programming languages (e.g., Java, Python, C#, JavaScript) and experience with secure coding practices. Hands-on experience with security testing tools (SAST, DAST, IAST) and vulnerability management platforms. Proven ability to design and implement security solutions within CI/CD pipelines. Strong leadership, communication, and interpersonal skills, with the ability to influence cross-functional teams.

Relevant certifications such as CISSP, CSSLP, or OSCP are highly valued. Experience with cloud security (AWS, Azure, GCP) and container security is a plus.

Benefits

Our client offers an exceptionally competitive salary, comprehensive health and wellness benefits, a generous retirement savings plan, and significant opportunities for career advancement and continuous learning, including support for advanced certifications and conferences. As a fully remote role, we provide flexibility in your work environment and schedule, fostering a healthy work-life balance. You will be joining a vibrant and innovative company culture that values security as a core principle.